TECHZEN Zenoss User Community ARCHIVE  
FORUMS / Configuration & Administration / DISCUSSION

Assign permissions to a new roles

Subject: Assign permissions to a new roles
Author: Alessandro Costa
Posted: 2017-05-16 05:19

Hi All,

I have a problem with permissions to be assigned to a new roles.
I added a role using the following procedure:
How To Add a New Role with New Permissions

After adding the role I assigned the new role to a test user and than I saw the first problem after login as test user.
In INFRASTRUCTURE I see only 30 device instead of 170. I noticed that if i log as admin and make a change
to one device, after I save the changes, the device appear in the list for test user.

This is not the main problem, what i need to do is to set customize permission to new roles, but It seems i'm doing something wrong.
What I need is:



From Zope level (http://myserver:8080/zport/manage) i click on security and check the boxes "manage event" and "Change Device Production State" in the column related to my new role. I have not idea about allowing reports.
After doing that my test user is allowed to clear alarms but still not able to change device production state.

Any Ideas? 
Is there any documentation about Zenoss Zope where I can find something more?

Thanks 
Alex

------------------------------
Ale Ale
------------------------------

Subject: RE: Assign permissions to a new roles
Author: Jane Curry
Posted: 2017-05-16 05:48

What version of Zenoss are you on? And is it Core or Service Dynamics?

Also - do you want to change permissions for a role for ALL devices or just for a subset?

The Core documentation is very confusing around here as it actually documents stuff that is specific to the chargeable product - I have already raised a ticket on this - https://jira.zenoss.com/browse/ZEN-27315 .  Check out the "Device Access Control Lists" under "Managing Users" in the Core Admin Guide for help on restricting access to SOME devices.

If you want to change permissions on a role globally then I would follow the article you indicated - the global instructions.  If you want to restrict roles and permissions for a subset of devices then use the "Administered Objects" technique described in the Admin Guide.  I suspect you will need the "Manage Device" permission in addition to the role you specified, in order to change the configuration of the device.

The other thing to be very careful about is testing new users and roles.  Make sure that you really logoff all Zenoss GUI windows and log back on as your new user - also make sure you clear your browser cache.  Better still, use a different browser to test - I tend to use Firefox as my usual browser and Chrome to do extra user testing.

Another lead you might follow is to get my UserRoles ZenPack from github - https://github.com/jcurry/ZenPacks.skills1st.UserRoles/tree/5.x Make sure you get the 5.x branch - I think that should be fine also on a 4.2.x Zenoss.  I would strongly recommend having a full backup of your Zenoss before installing this - I am not aware of it "hurting" anyone so far but it is fairly invasive code!

Cheers,
Jane

------------------------------
Jane Curry
Skills 1st United Kingdom
jane.curry@skills-1st.co.uk
------------------------------

Subject: RE: Assign permissions to a new roles
Author: Alessandro Costa
Posted: 2017-05-16 09:57

Thanks for your answer. 
I'm using Zenoss 4.2.5 core.
Unfortunately I don't have access to https://jira.zenoss.com/browse/ZEN-27315 (at logon it says:
You do not have a permission to log in. If you think this is incorrect, please contact your JIRA administrators.)

Anyway I will follow your suggests and let you know.

Thanks
Ale



------------------------------
Ale Ale
------------------------------


< Previous
Change zenhub resource in Zenoss 5 		  Next
Import / export of triggers and notifications 		>